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Abstract — We consider two-way wire-tap channels, where two 
users are communicating with each other in the presence of an 
eavesdropper, who has access to the communications through a 
multiple-access channel. We find achievable rates for two dif- 
ferent scenarios, the Gaussian two-way wire-tap channel, (GTW- 
WT), and the binary additive two-way wire-tap channel, (BATW- 
WT). It is shown that the two-way channels inherently provide a 
unique advantage for wire-tapped scenarios, as the users know 
their own transmitted signals and in effect help encrypt the other 
user's messages, similar to a one-time pad. We compare the 
achievable rates to that of the Gaussian multiple-access wire- 
tap channel (GMAC-WT) to illustrate this advantage. 

I. Introduction 

Information theoretic secrecy was first developed by Shan- 
non in [1]. In this work, Shannon showed that to achieve 
perfect secrecy in communications, which is equivalent to 
providing no information to an enemy cryptanalyst, the a 
posteriori probability of a message must be equivalent to its 
a priori probability. 

In [2], Wyner applied this concept to the discrete memo- 
ryless channel by defining the wire-tap channel, where there 
is a wire-tapper who has access to a degraded version of the 
intended receiver's signal. Using the normalized conditional 
entropy of the transmitted message given the received signal 
at the wire-tapper as the secrecy measure, he found the region 
of all possible rate/equivocation pairs, and the existence of a 
secrecy capacity, C s , the rate up to which it is possible to 
transmit zero information to the wire-tapper. 

Reference [3] extended Wyner's results to Gaussian chan- 
nels. Csiszar and Korner, [4], improved Wyner's results to 
weaker, "less noisy" and "more capable" channels. Further- 
more, they examined sending common information to both the 
receiver and the wire-tapper, while maintaining the secrecy of 
private information that is communicated to the receiver only. 

In [5], it is shown that the existence of a "public" feedback 
channel can enable the two parties to be able to generate 
a secret key even when the wire-tap capacity is zero. More 
recently, the notion of the wire-tap channel has been extended 
to parallel channels, [6], relay channels, [7], and fading chan- 
nels, [8]. Broadcast and interference channels with confidential 
messages are considered in [9]. References [10], [11] exam- 
ine the multiple access channel with confidential messages 
where two transmitters try to keep their messages secret from 
each other while communicating with a common receiver. 
Gaussian multiple-access wire-tap (GMAC-WT) channels are 
considered in [12]— [15], where transmitters communicate with 



an intended receiver in the presence of an external wire- 
tapper. In [13], [14], we considered the case where the wire- 
tapper gets a degraded version of the signal at the legitimate 
receiver, and found the secrecy-sum capacity for the collective 
set of constraints using Gaussian codebooks and stochastic 
encoders. In [15], the general (non-degraded) GMAC-WT was 
considered, and an achievable rate region for perfect secrecy 
with collective secrecy measures was found. 

In this paper, we consider the two-way channel where 
two nodes communicate with each other, [16]. We introduce 
the two-way wire-tap (TW-WT) channel where an external 
eavesdropper receives the transmitters' signals through a 
general MAC. In particular, we consider the Gaussian Two- 
Way Wire-Tap Channel (GTW-WT), and the Binary Additive 
Two-Way Wire-Tap Channel (BATW-WT). We utilize as our 
secrecy constraint, the normalized conditional entropy of the 
transmitted secret messages given the eavesdropper's signal, 
as in [2]. We show that satisfying this constraint implies the 
secrecy of the messages for both users. In both scenarios, 
transmitters are assumed to have one secret and one open 
message to transmit. We find an achievable secure rate region, 
for both cases, where users can communicate with arbitrarily 
small probability of error with the intended receiver under 
perfect secrecy from the eavesdropper. 

We also show that in cases where a user is not able to 
achieve secrecy, that user may help the other user increase its 
secrecy rate or achieve secrecy if it was not possible before, 
by jamming the eavesdropper. Thus, similar to the Gaussian 
multiple-access wire-tap channel, [15], cooperative jamming 
helps increase the secrecy rate. 

II. System Model and Problem Statement 

We consider two users communicating in the presence of 
an intelligent and informed eavesdropper. Each transmitter 
k G K. = {1,2} has a secret message, Wk, from a set of 
equally likely messages Wk = {1, • • • , MjA. The messages 
are encoded using (2 nRk ,n) codes into {X£(W k )}, where 
Rk = ^log 2 -Mfe- The encoded messages {X^} = {XJ!} are 
then transmitted. Each receiver k = 1, 2 gets Yfc = Y" fc ™ and 
the eavesdropper Z = Z n . Receiver k decodes Y& to get an 
estimate of the transmitted message of the other user. The users 
would like to communicate with arbitrarily low probability 
of error, while maintaining perfect secrecy of the messages, 
W. We assume the channel parameters are universally known, 
including at the eavesdropper, and that the eavesdropper also 




Fig. 1. The standardized GTW-WT system model 

knows the codebooks and coding scheme. We first define 
achievability for this wire-tap channel: 

Definition 1 (Achievable secrecy rates). The rate pair 
(Ri, R 2 ) is said to be achievable for the TW-WT, if for e > 
there exists a code of sufficient length n such that 

- log 2 M k >R k -e 



1,2 



P e <z 
H(W\Z) 



H(W) 



> 1 



(la) 
(lb) 

(lc) 



where 

P. = 



1 



P{W ^ W|W was sent}. (2) 



is the average probability of error for a given code. 

A. The Gaussian Two-Way Wire-Tap Channel 

We describe the Gaussian Two-Way Wire-Tap Channel 
(GTW-WT), which corresponds to a two-way wireless com- 
munications system. We assume slow fading, such that each 
codeword experiences the same channel coefficient, and also 
that all parties know the channel coefficients. The signals at 
the intended receiver and the eavesdropper are given by 



Yi 
Y 2 
Z 



Xi + v/^X 2 + Ni 
y^X! + X 2 + N 2 



'fq-x.2 



(3a) 
(3b) 
(3c) 



such that ij^^ < P fe , for k = 1,2 and N k ~ 
TV (0, cr£) and N w ~ Af(0,a^). For simplicity, without loss 
of generality, we consider an equivalent standard form as in 
[14] as illustrated in Figure 1. 



Yi = V^IX, + X 2 + Ni 
Y 2 = Xi + ^02X3 + N 2 
Z = V&i + y%X 2 + N w 
where, for k = 1, 2, 

• the codewords {X} are scaled to get Xi = 

/ ^2 'V . 

2 — \ TT-*-2, 



(4a) 
(4b) 
(4c) 



1 h M - 

h VXi and 



the maximum powers are scaled to get Pi = -4- -Pi and 



P2 = ^ 

the transmitters' new channel gains are given by ai 

2 2 a J 

-pfer and a 2 = 



-iv — , — -f4- 
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Fig. 2. BATW-WT system model 

the wiretapper's new channel gains are given by hi = 



and ho = 



the noises are normalized by = and N 



B. The Binary Additive Two-Way Wire-Tap Channel 

This model, shown in Figure 2, corresponds to a more 
classical wire-tapped channel, where the binary signals of two 
transmitters are superimposed on a common wire, as in [16], 
and random bit errors are produced as in a binary symmetric 
channel. For the BATW-WT, the received signals are given by 



Yi =X a 
Y 2 = Xi 
Zi = Xi 



X 2 
X 2 

x 2 



E 2 
E w 



(5a) 
(5b) 
(5c) 



where Ei,E 2 ,E w are n-vectors of binary random variables 
representing errors such that ¥{Eki = l}=£fc<^ and 
P{E V i = 1} = e w < \'£k is the error probability at receiver 
k = 1,2; e w is the error probability at the wiretapper. 

III. Achievable Rates 

In this section, we give our results on some achievable rates 
for the TW-WT channels considered in this paper. The proofs 
for both the GTW-WT and BATW-WT are similar and are 
summarized in Appendix I. For details, please see [17]. We 
first define a few quantities: 

1 



4 max {£,()}, ff(f) = §log(l + 

MO = -£iog£-(i-Oiog(i-0, 0<£<1 

V = {(Pi,P 2 ): < Pr < P u < P 2 < P 2 } 



and 




g(P k ), 

l-h{e h ), 

g {hiPi + h 2 P 2 
1 - h(e w ), 



if GTW-WT 
if BATW-WT 



if GTW-WT 
if BATW-WT 



(6) 
(7) 



We now give achievable secret-rate regions for the two chan- 
nels. In both channels under consideration, capacity without 
secrecy constraints can be achieved using independent inputs: 
for the GTW-WT, this was shown in [18]. For the BATW-WT, 
it is easily checked that the symmetry conditions in [16] apply, 
and the capacity region is a rectangle obtained by equiprobable 
inputs. The achievable secrecy rate regions in this paper are 
obtained using independent channel inputs. 



Theorem 1. Let 

'R?™(Pi,P 2 )={(Ri,R 2 ): 
Rk<g{Pk) k = l,2 

Ri + R2< [g(Pi) + g(P 2 ) - g(hiPi + h 2 P 2 )] + ] 

The rate region given below is achievable for the GTW-WT: 



(8) 



K G ™ = convex closure of |J ft GTW (P) (9) 

Pev 

Proof: See Appendix I. □ 



Theorem 2. For the BATW-WT, we can achieve the following 
set of rates: 

K Bxm = {{Ri,R 2 ): 

Rk<l-h(e k ) k=l,2 

Ri+R 2 <[l + h(s w ) - h(si) - h(e 2 )] + } K ' 
Proof: See Appendix I. □ 

IV. Maximization of Sum Rate for GTW-WT 

The achievable regions given in Theorem 1 depends on 
the transmit powers. We are naturally interested in the power 
allocation P* = (Pi,P 2 ) that would maximize the total 
secrecy sum-rate. Without loss of generality, we will assume 
that hi < h 2 . We formally state the problem as: 



max Ci + C 2 — C w 
Pev 

= max g (P x ) + g (P 2 ) - g (hiPj. + h 2 P 2 ) 



min p(P) 
Pev 



where 



P(P) = 



1 + hxPi + h 2 P 2 



(11) 
(12) 

(13) 



(l+Pi)(l + P 2 ) 
The optimum power allocation is stated below: 

Theorem 3. The secrecy sum-rate maximizing power alloca- 
tion for the GTW-WT is given by: 

( (Pi,P 2 ), if hi < 1 + h 2 P 2 , h 2 <l + hiPi 

(Pi,p 2 ) = I (A, o), if hi < l, h 2 > l + hiPi 

[(0,0), otherwise 

(14) 

Proof: See Appendix II. □ 
Note that the solution is such that as long as a user is not 
single-user decodable, it should be transmitting with maximum 
power. Comparing this with the GGMAC-WT region found 
in [15], we note the same structure, namely, that secrecy is 
achievable for both users, as long as neither can be decoded 
by treating the other user as noise. 

V. Cooperative Jamming 

In [15], it was shown that for the GGMAC-WT, a user who 
ceases transmission to maximize the secrecy sum-rate may 
jam the eavesdropper and allow an increase in the remaining 
users' secrecy rate, or even allow a user to achieve a positive 
secrecy rate. Similarly, in Theorem 3, we see that when user 
2 is single-user decodable, i.e. h 2 > 1 + hi Pi, it must cease 




Fig. 3. Example region for a TW-WT 

transmission in order to maximize sum rate. We show that in 
this case, user 2 can similarly help user 1 increase its secret 
rate and/or achieve a positive secrecy rate. This is achieved by 
letting user 2 transmit white Gaussian noise instead of actual 
codewords. Since receiver 2 knows the transmitted codewords, 
it can subtract these from its received sequence to get a clear 
channel from user 1. However, the eavesdropper, devoid of 
this side information, sees more noise and the achievable 
secrecy capacity for user 1 (since we are reduced to the single 
user case, [3] established that this is indeed the capacity) is 
increased as it is the difference of the capacity to user l's 
channel to receiver 2 and its channel to the eavesdropper. This 
is stated below: 

Theorem 4. The optimum power allocations for the cooper- 
ative jamming scheme described is 



(P*,P 2 *) 



(Pi,P 2 ), if/n<l- 
(0,0), otherwise 



h 2 P 2 



(15) 



Proof: See Appendix III. □ 
This can be interpreted as "jam with maximum power if it is 
possible to change user l's effective channel gain such that it 
is no longer single-user decodable". If h 2 < 1 + hiPi, then 
user 2 must be transmitting instead of jamming. 

We can similarly consider a scheme for the BATW-WT. 
Note that the achievable secret-sum rate is when h(ei) + 
h(e 2 ) > 1 + h(e w ). This implies that £/. > e w , k = 1,2. Let 
£i < £ 2 - Then, user 2 can randomly transmit bits drawn ac- 
cording to the binary distribution with P{X 2 i = 1} = h. This 
is equivalent to randomly adding a bit to the eavesdropper's 
signal. Hence the probability of error at the eavesdropper for 
user 2's codeword becomes \, and the eavesdropper cannot 
gain any information about user l's transmitted codeword. 
Receiver 2, however, knows the jamming sequence, which 
it can subtract from its received sequence. Thus, user 1 can 
transmit to user 2 at a rate 1 — h(e x ), which is its capacity. 

VI. Numerical Results and Conclusions 

We now illustrate our results via numerical examples. A 
typical region for the TW-WT channels considered is shown 
in Figure 3. Figure 4 shows an achievable region as a function 
of the power allocations. We can see that the optimum power 
allocation is given by Theorem 3. Finally, Figure 5 shows the 



Fig. 4. GTW-WT achievable secrecy region when Pi = 5, P2 = 
2,hi = .5,h 2 = 1.5. 

secrecy capacity increase for user 1 as a function of user 2's 
jamming power. 

Comparing the GTW-WT region to the achievable region 
for the GGMAC-WT, [15], we can see the enlargement of the 
rate region due to the two-way communications scenario. Even 
though the signal received by the eavesdropper is the same, 
the two-way channel effectively provides a shared secret, 
namely the transmitters' knowledge on their own codewords, 
and hence enlarges the rate region. In addition, unlike the 
GGMAC-WT, sum secret rate is not limited by the channel 
gains as the power limitations are relaxed for the GTW-WT. 
In fact, we see that limp^^ R\ + R2 — g(^P). 

An important thing to note is that in both channels, the 
achievability proof uses a scheme that requires the receivers 
to decode one of 2 n ( Rk+Rk ^ codewords. Thus, the actual rate 
of communication is Rk + R% , although only a rate Rk is 
"secret" information. We can utilize the extra codewords to 
communicate at an additional rate although the secrecy 
of these messages is not guaranteed. Thus, we may use the 
channel to its full capacity, but are limited in rate by how 
much of the communication can be kept secret as in [3], [14]. 

In conclusion, we see that two-way channels provide an ex- 
tra advantage for wire-tap scenarios as the receivers, knowing 
their own transmitted codewords, gain an advantage over the 
eavesdropper that is not possible for multiple-access wire-tap 
channels. As a result, a larger achievable region is found, and 
for the scenarios considered cooperative jamming proves to 
be even more useful as it does not hurt the transmitting user's 
rate as it does for the GMAC-WT. 

Appendix I 
Achievability Proofs 

The proofs follow along the same line as the proof in [15] 
for the achievability of the general GMAC-WT. Let P G V 
and R G K G ™ for the GTW-WT, and let R G K BA ™ for the 
BATW-WT. Consider user j = 1, and the following scheme 
(the other user does exactly the same): 

1) Generate 2 codebooks Xi,Xi. Xi consists of Mi code- 
words, and codebook Xi has Mf codewords. The code- 



Fig. 5. GTW-WT cooperative jamming secrecy capacity as a function 
of P 2 with different hi for P = 2, h 2 = 4.2 

books are generated such that 

a) For the GTW-WT, each component of the codes in Xi is 
drawn ~ Af (0, AiPx — £ )> an d eacn component of Xi is 
drawn ~ Af (0, (1 — Ai)Pi — e) where e is an arbitrarily 
small number to ensure that the power constraints on the 
codewords are satisfied with high probability. 

b) For the BATW-WT, codewords in Xi and Xi are drawn 
uniformly according to a binary distribution with p = i . 

2) To transmit message Wi G Wi, user 1 finds the codeword 
corresponding to W\ in Xi and also uniformly chooses a 
codeword from Xi. User 1 then adds (xor's for the binary 
case) these codewords and transmits the resulting codeword, 
Xi, so that we are actually transmitting (uniformly) one of 
M-yMf codewords, and the rate of transmission is Ri+Rf, 
where Rf = ilogMf. 

We choose the rates to satisfy 

Rk + Rt<Ck, fc = l,2 (16) 
Ri + R2 < Ci + C 2 - C w (17) 
Rf + R% = C w (18) 

The first set of conditions for both channels guarantee that 
receiver 1 can reliably decode the 2 n ^ R2+R ^ codewords from 
user 2 since it knows its own transmitted codeword, Xi, 
and can subtract (or xor for the binary case) this with its 
received sequence Yi to get a single-user channel from the 
other transmitter such that for the GTW-WT, it has X 2 + Ni 
and for the BATW-WT, it has X 2 8 Ei. Then, the standard 
channel coding arguments, see [19], can be used to establish 
that rates of Ck can be achieved for user k. Define 

Jx/^Xx + V^Xa, if GTW-WT 
|Xi©X 2 , if BATW-WT 

Then, 

H(W\Z)=H(W,Z)-H(Z) (20) 
= J ff(W,X s ,Z)- J ff(X E |W,Z)- J ff(Z) (21) 
= H(W) + H(Z\W, X E ) - H(Z) 

+ ff(X E |W)-tf(X s |W,Z) (22) 



H(W) - J(X E ; Z) + 7(X E ; Z|W) 



(23) 



where the key observation is that the eavesdropper's informa- 
tion on W only depends on X E , i.e. W — > Xs — > Z, and 
hence J7(Z|W,X E ) = #(Z|X E ). 

Note that we have 7(X E ;Z) < nC w , from the capacity 
of the standard single user binary additive channel. We can 
also write 7(X S ; Z|W) = H (X E |W)-/f(X E |W, Z). Since, 
given each pair of messages, W, we uniformly send one 
of MfMf random sum-codewords, we have if(X E |W) = 
log(MfMf) = n(i?f + = nC w . In addition, we have 
/f(X E |W, Z) < e, since given W, we transmit one of only 
nC w codewords, and the eavesdropper can reliably decode 
these. Thus, we also have 7(X E ; Z|W) > nC w — ne. Using 
these in (23), we see that 



H(W\Z) > H(W)-nC vl 



H(W) - ne (24) 



Appendix II 
Proof of Theorem 3 
The Lagrangian is given by, 

£(P, n) = p(P) - ELiMife^ + ELiV2k(Pk - Pk) (25) 
Equating the derivative of the Lagrangian to zero, 



dp* 



Pj( P *)-Mlj+/^j =0 



where 



PA ^ } (l + Pl )(i + P 2 ) 



l + P, 



(26) 

(27) 
(28) 



It is easy to see that if hj > <J>j(P), then /iy > 0, and we have 
P* = Pj. If hj < <Pj(P), then we similarly find that P* = 0. 
Finally, if hj = $j(P), we can have < P* < Pj. However, 
such a user has pj(P*) = 0, so we can set P* = with no 
effect on the secrecy sum-rate. Thus, we have P* = Pj if 
hj < (j)j(P), and P* = if hj > <^-(P). 

Now consider user 1. If P* = 0, then hi > hi > l + h 2 P 2 , 
but if P 2 * > 0, this implies that h 2 > ^+p? and P 2 * = 0. 
This contradiction shows that if P* = 0, then P 2 = 0. Assume 
PI = Pi, i.e. hi < l + h 2 Pi. lf_h 2 >l + h 1 P 1 , then P 2 * = 0. 
If h 2 < 1 + hiPi, then P* = P 2 . 

Appendix III 
Proof of Theorem 4 
We can write the problem formally as: 



max q (Pi) — q 
PGP JK ' 



hxPi\_ . P(P) 
= mm — ; — - 

l + h 2 P 2 J P6P(fe(P 2 ) 



(29) 



where p is given in (13) and 4> 2 {P 2 ) = 1 ^p f>2 ■ 
The Lagrangian is given by 

c(p,n) = ^L^j2Li^kP k +El=i^ k (Pk-Pk) (30) 
<pi \r 2 ) 

Taking the derivative with respect to P*, P 2 , we get: 



Pi(P*) 

MP 2 ) 

p 2 (P)MPj) - p(P)MPj) 
rt{P 2 ) 



pn + M21 =0 (31) 



P-12 + M22 = (32) 



where p is as given in (27) and 4> 2 (P) = j> ■ 

Consider user 1. If we have hi > 1 + h 2 P 2 , then we must 
have p,n > since the first and last terms in (31) would be 
positive, making Pj* = 0. Assume Pj* > =>■ /in = 0. If 
hi < 1 + h 2 P 2 , then the first term is negative, and P* = JP\. 
If hi = 1 + h 2 P 2 , then the sum rate is zero, and we can set 
Pj* = 0. For user 2, it is very easy to see that since it only 
harms the jammer, the optimal jamming strategy should have 
P 2 * = P 2 , as long as user 1 has Pj* > 0. This can also be seen 
by noting that p 2 (P)</> 2 (P 2 *) - p(P)0 2 (P 2 *) < for Pj* > 0. 
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